Skip to content
Threat Feed

Tag

Theme-File

1 brief RSS
medium threat

Windows Theme File Creation in Unusual Location

Detects the creation of Windows theme files in unusual locations, such as Desktop, Documents, Downloads, or Temp directories, which can be indicative of remote code execution or NTLM coercion attacks.

exploited Splunk Enterprise +2 windows theme-file code-execution credential-theft
2r 3t